This means that when you restart the web server after changing the SSL configuration, you can be left with nothing but a "connection refused" message! Much better just to disable the listener with the fault...

Maybe you should link to a guide to making these keys from that dialog? Most users will find this tricky.